AZ-204 Connect to and consume Azure services and third-party services Practice Test 14 — 15 Questions

Question 1

Which TWO services can be used to implement serverless event-driven architectures in Azure? (Choose 2)

Accepted Answer

Azure Logic Apps. Azure Logic Apps (B) is correct because it is a fully managed, serverless workflow service that provides hundreds of connectors and triggers, enabling event-driven integration and orchestration without provisioning servers. Azure Functions (E) is correct because it is a serverless compute service that runs code in response to events via triggers and bindings (e.g., HTTP, timers, Blob Storage, Event Grid, Service Bus), which is the core of event-driven architectures. Azure Batch (A) is a job-scheduling service for large-scale parallel/HPC workloads on pools of VMs, not a serverless event-driven platform. Azure Kubernetes Service (C) is a managed Kubernetes container orchestration service requiring cluster nodes, so it is not serverless. Azure App Service (D) is a managed platform for hosting web apps and APIs on dedicated plans, not a serverless event-driven service.

Answer

Azure Batch

Answer

Azure Kubernetes Service

Answer

Azure App Service

Question 2

Which THREE factors should be considered when choosing between Azure Service Bus and Azure Event Hubs for a messaging solution? (Choose 3)

Accepted Answer

Event Hubs is optimized for high-throughput telemetry ingestion. Option B is correct because Azure Event Hubs is a big-data streaming platform designed for high-throughput telemetry ingestion, capable of ingesting millions of events per second with low latency, making it the right choice for event streaming and telemetry scenarios. Option C is correct because Azure Service Bus natively supports topics and subscriptions, enabling publish/subscribe patterns with features like filters and rules, which Event Hubs does not provide in the same way. Option E is correct because both Event Hubs and Service Bus are cloud services that can be integrated with on-premises systems through hybrid architectures using VPN, ExpressRoute, or on-premises connectors, so hybrid cloud support is a valid consideration for either. Option A is incorrect because Event Hubs provides a Kafka endpoint that is compatible with Apache Kafka client applications, so it can be used with Kafka clients. Option D is incorrect because Service Bus does support the AMQP 1.0 protocol, which is one of its primary messaging protocols alongside HTTP.

Answer

Event Hubs cannot be used with Apache Kafka client applications

Answer

Service Bus does not support the AMQP protocol

Question 3

Refer to the exhibit. A developer is creating an Azure Data Factory pipeline to copy data from Azure Blob Storage to Azure SQL Database. The pipeline fails with a timeout error when copying large files. Which action should the developer take to resolve the issue?

Accepted Answer

Increase the timeout value in the copy activity settings. The copy activity in Azure Data Factory has a default timeout of 7 days, but when copying large files, the activity may fail due to the default timeout for the underlying HTTP request to Blob Storage (which is 7 minutes for a single block). Increasing the timeout value in the copy activity settings allows more time for the entire file transfer to complete, especially for large files that require multiple retries or slower network conditions.

Answer

Change the source type to DelimitedTextSource

Answer

Enable Data Integration Units (DIU) to increase throughput

Answer

Use a staging copy with Azure Data Lake Storage Gen2

Question 4

Refer to the exhibit. An Azure Function is configured with an Event Hub trigger to process telemetry data. The function uses the EventProcessorHost to read events. The developer notices that the function is not processing all events; some events are skipped. What is the most likely cause?

Accepted Answer

The cardinality is set to 'many' causing batch processing issues. Setting the cardinality to 'many' in an Event Hub-triggered Azure Function causes the function to process events in batches. If the batch size is not properly configured or if the function fails to checkpoint after processing a batch, some events may be skipped when the host rebalances or restarts. The EventProcessorHost relies on checkpointing to track progress, and batch processing without proper checkpoint handling can lead to event loss.

Answer

The event hub name is misspelled

Answer

The consumer group is set to $Default

Answer

The connection string is stored as a securestring parameter

Question 5

A company uses Azure Functions to process orders. The function needs to read messages from an Azure Service Bus queue. Which binding should the developer configure in the function.json?

Accepted Answer

serviceBusTrigger. The correct binding for reading messages from an Azure Service Bus queue in an Azure Functions app is `serviceBusTrigger`. This trigger binding listens to a Service Bus queue or topic subscription and invokes the function when a message arrives. Option D is correct because it specifically names the Service Bus trigger, which is designed for this purpose.

Answer

serviceBus

Answer

eventHubTrigger

Answer

queueTrigger

Question 6

A web app uses Azure Key Vault to store secrets. The app runs in a production environment and needs to authenticate to Key Vault without storing connection strings in configuration files. Which authentication method should be used?

Accepted Answer

Managed identity. Managed identity (Option B) is correct because it allows the web app to authenticate to Azure Key Vault without storing any credentials in code or configuration files. Azure automatically manages the identity for the app, and the app uses the Azure Identity SDK to obtain tokens via the Azure Instance Metadata Service (IMDS) endpoint, which eliminates the need for connection strings or secrets.

Answer

Client secret stored in app settings

Answer

Storage account access keys

Answer

Certificate stored in Key Vault

Question 7

A microservices application deployed on Azure Kubernetes Service (AKS) needs to securely store and retrieve configuration settings. The configuration should be updated without redeploying containers. Which Azure service should be used?

Accepted Answer

Azure App Configuration. Azure App Configuration is purpose-built for managing configuration settings for microservices applications. It provides a centralized store for key-value pairs and feature flags, supports dynamic configuration updates without requiring container restarts or redeployments, and integrates natively with AKS via the App Configuration Kubernetes Provider or the Azure SDK. This enables live configuration changes that are automatically picked up by running containers.

Answer

Azure Cosmos DB

Answer

Azure Key Vault

Answer

Azure Blob Storage

Question 8

A company uses Azure Logic Apps to integrate with a third-party SaaS application. The Logic App must send an HTTP request to the SaaS API and handle pagination. Which connector should be used?

Accepted Answer

HTTP. The HTTP connector is the correct choice because it allows the Logic App to send a raw HTTP request to any REST API and handle pagination manually by inspecting response headers (e.g., 'nextLink') or body properties. Unlike other connectors, it provides full control over request/response cycles, enabling custom pagination logic without relying on a predefined API schema.

Answer

API Connection

Answer

HTTP + Swagger

Answer

HTTP Webhook

Question 9

A developer is building an app that uses Azure Cognitive Services Text Analytics. The app needs to detect the language of text input. Which Azure SDK method should be called?

Accepted Answer

DetectLanguage. The correct method is `DetectLanguage` because the Azure Cognitive Services Text Analytics API provides a dedicated operation for identifying the language of input text. This method returns the detected language along with a confidence score, making it the appropriate choice for the requirement of detecting language from text input.

Answer

ExtractKeyPhrases

Answer

AnalyzeSentiment

Answer

RecognizeEntities

Question 10

A company uses Azure API Management (APIM) to expose APIs to external partners. They need to enforce rate limiting per subscription key. Which APIM policy should be configured?

Accepted Answer

rate-limit. The rate-limit policy in Azure API Management is specifically designed to enforce rate limiting per subscription key, preventing individual API consumers from exceeding a defined number of calls within a specified time window (e.g., per second or per minute). This policy operates on a sliding window counter, ensuring fair usage across partners without affecting other subscribers. It is the correct choice because it directly targets subscription-based throttling at the API gateway level.

Answer

quota

Answer

ip-filter

Answer

throttling

Question 11

An app uses Azure Event Grid to publish events. The events must be delivered to an Azure Function that processes them. Which Event Grid event delivery model should be used?

Accepted Answer

Push delivery. Azure Event Grid uses a push delivery model to send events to subscribers like Azure Functions. When an event occurs, Event Grid automatically forwards (pushes) the event to the configured endpoint via HTTP POST requests. This ensures near-real-time processing without the subscriber needing to poll for new events.

Answer

Pull delivery

Answer

Batch delivery

Answer

Poll delivery

Question 12

A company has an Azure App Service web app that reads from Azure Blob Storage. The app uses a connection string stored in app settings. Recently, the storage account key was rotated, and the app started throwing authentication errors. What should the developer do to resolve this issue without redeploying the app?

Accepted Answer

Update the connection string in the app settings to use the new key. The app uses a connection string in app settings that contains the old storage account key. After key rotation, the connection string must be updated in the app settings to use the new key. This can be done in the Azure portal or via CLI without redeploying the app, and the app will pick up the new setting after a restart or configuration refresh.

Answer

Change the app to use managed identity

Answer

Rotate the storage account key again

Answer

Restart the app service

Question 13

A developer needs to store a large number of binary files (images) that are accessed frequently from a web app. Which Azure storage solution is most cost-effective?

Accepted Answer

Azure Blob Storage. Azure Blob Storage is the most cost-effective solution for storing large numbers of binary files like images because it is optimized for massive scale, high-throughput, and low-cost object storage. It supports hot, cool, and archive access tiers to balance cost and access frequency, and it integrates directly with web apps via HTTP/HTTPS REST APIs or SDKs, making it ideal for frequently accessed static content.

Answer

Azure Queue Storage

Answer

Azure Files

Answer

Azure Cosmos DB

Question 14

Which THREE considerations are important when designing a solution using Azure API Management (APIM) to secure backend APIs?

Accepted Answer

Implement rate limiting to prevent abuse. Option A is correct because implementing rate limiting (via the rate-limit or rate-limit-by-key policy) in APIM protects backend APIs from abuse, throttling excessive requests and mitigating denial-of-service or brute-force scenarios. Option C is correct because using OAuth2 authentication with Microsoft Entra ID (Microsoft Entra ID) lets APIM validate caller identity through token issuance and scopes, ensuring only authorized clients can reach the backend. Option D is correct because JWT validation policies (validate-jwt) verify token signatures, issuers, audiences, and claims at the gateway, enforcing authentication and authorization before requests reach the backend. Option B is wrong because storing backend database credentials in APIM policies exposes secrets in policy definitions; credentials should be kept in Azure Key Vault and referenced via named values. Option E is wrong because disabling TLS removes transport encryption, exposing API traffic to interception and violating security best practices.

Answer

Store backend database credentials in APIM policies

Answer

Disable TLS to improve performance

Question 15

Which TWO Azure services can be used to store application configuration settings?

Accepted Answer

Azure App Configuration. Azure App Configuration (A) is purpose-built for centrally managing application settings and feature flags, providing key-value storage with labels, revisions, and point-in-time snapshots that applications can consume via SDKs or the REST API. Azure Key Vault (E) is also correct because it stores configuration secrets such as connection strings, API keys, and certificates that applications retrieve at runtime, and it is commonly paired with App Configuration for a complete configuration solution. Azure Queue Storage (B) is a messaging service for asynchronous message passing between components, not a configuration store. Azure Blob Storage (C) is object storage for unstructured data like documents and images, not a dedicated configuration service. Azure Cosmos DB (D) is a globally distributed NoSQL database for application data, and while it could technically hold settings, it is not intended as an application configuration service.

Answer

Azure Queue Storage

Answer

Azure Blob Storage

Answer

Azure Cosmos DB